omniverse-usd-performance-tuning
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands and the Python
subprocessmodule to perform various tasks. - Evidence found in
references/setup-usd-performance-tuning/references/install-kit/README.mdandreferences/setup-usd-performance-tuning/references/install-so-standalone/README.mdfor installing Omniverse Kit and unzipping Scene Optimizer packages. - The
usd_validation_executor.pyscript executes itself in a child process to manage C++ rule execution timeouts and isolate the environment. - [EXTERNAL_DOWNLOADS]: The workflow involves fetching external assets and libraries from official sources.
- Evidence in
references/upstreams/usd-optimize.mdandinstall-so-standalone/README.mdshow downloads fromhttps://d4i3qtqj3r0z5.cloudfront.net/, which is NVIDIA's verified distribution infrastructure for Scene Optimizer releases. - Python package installations use
pipwithhttps://pypi.nvidia.comas an extra index URL, which is a well-known vendor service. - [SAFE]: No malicious patterns such as data exfiltration, obfuscation, or unauthorized access were detected. The skill is highly structured, uses schema validation for its reports, and follows least-privilege principles by requiring user confirmation for high-risk actions like running custom Python scripts or performing mesh decimation.
Audit Metadata